Froxlor

Dear Froxlor Community, we are proud to announce the final release of version 0.9.37 which includes a complete DNS editor for domains and also supports PowerDNS in standalone mode as nameserver.DNS-Editor   Admins and customers are now able to edit ... [More] the DNS settings of domains. You can freely add and remove entries - froxlor will always ensure that the basic required entries are present. These are NS, MX and A/AAAA. They will always be generated if not overwritten by a custom entry.   The access to the DNS-editor can be managed on a per-customer base by the admin. Only domains that have the nameserver-flag enabled and which are allowed to be edited by the customer can have DNS records.   Please keep in mind that we limited the record-types to the following list: A, AAAA, CNAME, MX, NS, SRV, TXT   We are aware that DNS is way more that that and that there is always a bunch of users who need other types - patches and pull-requests are always welcomed ;-)   NOTE: If you are using <=PHP-5.3 you will need to patch the file lib/functions/dns/function.CreateDomainZone.php as follows as we missed using the 'long' array syntax there (will be fixed in the first maintenance release). See https://github.com/Froxlor/Froxlor/compare/51152ef0262f...11d358133e57 --- a/lib/functions/dns/function.createDomainZone.php +++ b/lib/functions/dns/function.createDomainZone.php @@ -55,8 +55,8 @@ function createDomainZone($domain_id, $froxlorhostname = false, $isMainButSubTo if ($domain['isemaildomain'] === '1') { addRequiredEntry('@', 'MX', $required_entries); if (Settings::Get('system.dns_createmailentry')) { - foreach(['imap', 'pop3', 'mail', 'smtp'] as $record) { - foreach(['AAAA', 'A'] as $type) { + foreach(array('imap', 'pop3', 'mail', 'smtp') as $record) { + foreach(array('AAAA', 'A') as $type) { addRequiredEntry($record, $type, $required_entries); } }  PowerDNS   As alternative to bind, you are now able to use PowerDNS (pdns) as nameserver.  Attention: you will have to create the powerdns database yourself! When using froxlor's configuraton template for powerdns, froxlor will use powerdns' configuration file to read the database-user-credentials to be able to add/edit/remove zones and records. So double check that all path's are correct.  Minor enhancements You can now also customize the global customer-docroot options when using apache webserver and mod_php. Please be aware that no syntax-checking is done (as known from 'specialsettings' or 'custom vhost-content').   The warn-emails about traffic and web-usage can now be enabled and disabled separately by setting the required percentage to 0.   In addition to that, admins can now specify whether specific menu-items are hidden from the customer (regardless of resources assigned to the customer). These settings are global and valid for all customers.Changes in 0.9.37:   You can see all (minor) changes in our bugtracker at https://redmine.froxlor.org/versions/72 and https://redmine.froxlor.org/versions/74Download: 0.9.37Note: Gentoo-ebuild and Debian packages will be available shortly as usual. Visit http://www.froxlor.org or join our IRC channel #froxlor on irc.freenode.net. Thank you, d00p [Less]

Dear Froxlor Community, we are proud to announce the first release candidate for our upcoming version 0.9.37 which includes a complete DNS editor for Domain and also supports PowerDNS in standalone mode as nameserver.   You can now also customize the ... [More] customer-docroot options when using apache webserver and mod_php and activate the warn-emails about traffic and web-usage separately   Please test the DNS feature thoroughly and give feedback. Thanks in advance.Changes in 0.9.37-rc1:   You can see all (minor) changes in our bugtracker at https://redmine.froxlor.org/versions/72Download: 0.9.37-rc1Note: Gentoo users might use the 9999 ebuild for a live-version. There will be no Debian packages for release-candidates. Visit http://www.froxlor.org or join our IRC channel #froxlor on irc.freenode.net. Thank you, d00p [Less]

Dear Froxlor Community,   we are proud to announce the final release of 0.9.36 which comes with a customer backup solution and some improvements for our Let's Encrypt implementation.  Customer backup   If enabled, customer are now able to backup ... [More] their data from within the panel. A nightly cronjob processes the backup-jobs and stores the archive into the customer-given directory. Of course, the time interval for the cronjob can be changed according to your needs.Let's Encrypt Our implementation of LE now handles alias-domains correctly and adds them to the SAN list of the certificate-request.Changes in 0.9.36: You can see all changes in our bugtracker at https://redmine.froxlor.org/versions/71Download: 0.9.36Note: Gentoo-ebuild and Debian packages will be available shortly as usual. Visit http://www.froxlor.org or join our IRC channel #froxlor on irc.freenode.net. Thank you, d00p [Less]

Dear Froxlor Community,   we are proud to announce the final release of 0.9.35 which includes some new kick-ass features.  Support for Let's Encrypt   Many of you were waiting for this one for quite some time now. We finally managed to include ... [More] ssl-certificate generation via Let's Encrypt directly within froxlor's interface. It's easy as a click on "use let's encrypt" when adding/editing a domain. The certificate will be created and renewed automatically.Please keep in mind that this feature is in BETA state.   - Important: Let's Encrypt uses cURL - ensure you have the php-curl extension installed on your system   - To ensure the Let's Encrypt cronjob is in your /etc/cron.d/froxlor file, please run the cronjob manually using the --force parameter, e.g. php /var/www/froxlor/scripts/froxlor_master_cronjob.php --force - As Let's Encrypt uses requests to a special URI you need to configure an Alias for your webserver to do so follow these simple steps: - activate Let's Encrypt in the settings - as admin, goto Configuration -> select your distro -> select Webserver -> select your software - copy'n'paste the acme.conf part of the configration template - restart/reload webserver Multiple default IP addresses   You can now select multiple IP addresses you want to be set as default for new domains in the System-settings. Until now it was only possible to define one default IP address. This is especially handy if your server has an IPv4 and IPv6 address for example.  Auto-Update   As of the release candidate 0.9.35-rc1, you are be able to update to future releases from within the webinterface. It will automatically download the latest archive and extract it - and you're done. Most of you will first enjoy this after our next release ;-)  Menu structure   We re-organized some menu-items to reflect their corresponding affinity. The former "Server" category is now called "System". PHP related settings / information are now in their own category. Also "IPs and Ports" and "Recalculate resource usage" were put in the "Resources" category (where they belong).  Set MYSQL_PASSWORD on configuration templates   It is now possible to set the MYSQL_PASSWORD value (via JavaScript, only client-side) when configurating services with our templates. This eases the process and you do not need to search and replace for MYSQL_PASSWORD in the config files again (also you are likely to not miss any of the occurences).  System-Log for customer   The customers are now able to see actions related to their account in the menu-item "System-Log", depending on the log-level set in the settings. This is also very helpful for response-messages from Let's Encrypt.  Changes in 0.9.35: You can see all changes in our bugtracker at http://redmine.froxlor.org/versions/68 and http://redmine.froxlor.org/versions/70Download: 0.9.35Note: Gentoo-ebuild and Debian packages are now available. Visit http://www.froxlor.org or join our IRC channel #froxlor on irc.freenode.net. Thank you, d00p [Less]

Dear Froxlor Community,   we are proud to announce the first release candidate for our upcoming version 0.9.35 which includes some new kick-ass features.  Support for Let's Encrypt   Many of you were waiting for this one for quite some time now. We ... [More] finally managed to include ssl-certificate generation via Let's Encrypt directly within froxlor's interface. It's easy as a click on "use let's encrypt" when adding/editing a domain. The certificate will be created and renewed automatically.Please keep in mind that this feature is in BETA state.  VHost-Templates   Froxlor now provides an editor for custom virtual-host configurations for you. Whenever you have special needs for specific domains or you want to have full control over the content of the generated virtual-hosts - this feature is what you want :-) This feature was not fully operational and will not be included in the final version of 0.9.35  Multiple default IP addresses   You can now select multiple IP addresses you want to be set as default for new domains in the System-settings. Until now it was only possible to define one default IP address. This is especially handy if your server has an IPv4 and IPv6 address for example.  Auto-Update   As of this release candidate, you will be able to update to future releases from within the webinterface. It will automatically download the latest archive and extract it - and you're done - and yes, you can use that already to update to the final release of 0.9.35 when it's released.  Menu structure   We re-organized some menu-items to reflect their corresponding affinity. The former "Server" category is now called "System". PHP related settings / information are now in their own category. Also "IPs and Ports" and "Recalculate resource usage" were put in the "Resources" category (where they belong).  Set MYSQL_PASSWORD on configuration templates   It is now possible to set the MYSQL_PASSWORD value (via JavaScript, only client-side) when configurating services with our templates. This eases the process and you do not need to search and replace for MYSQL_PASSWORD in the config files again (also you are likely to not miss any of the occurences).  System-Log for customer   The customers are now able to see actions related to their account in the menu-item "System-Log", depending on the log-level set in the settings. This is also very helpful for response-messages from Let's Encrypt.  Changes in 0.9.35-rc1:   You can see all (minor) changes in our bugtracker at http://redmine.froxlor.org/versions/68Download: 0.9.35-rc1Note: Gentoo users might use the 9999 ebuild for a live-version. There will be no Debian packages for release-candidates. Visit http://www.froxlor.org or join our IRC channel #froxlor on irc.freenode.net. Thank you, d00p [Less]

Dear Froxlor Community,   as our latest stable release of froxlor is quite established now, it is time for some minor bugfixes and improvements.Changes in 0.9.34.1 / 0.9.34.2: + #1562: added always_populate_raw_post_data when create php-fpm config ... [More] file + #1566: added Apache 2.4 als Auswahl im Setup + #1567: added orange/warning color in web- and traffic-progress bars (admin/customer overview) ~ #611: fixed function.findDirs stops after first unreadable directory ~ #1517: fixed SUSE config files not accessible ~ #1550: fixed Read config file in panels ~ #1553: fixed frische Installation auf openSuSE 13.2 ~ #1554: fixed Password Reset defect / MD5 hashed password recalculated to faulty hash ~ #1555: fixed PHP Notice: Undefined variable: domain in /var/www/froxlor/scripts/jobs/cron_tasks.inc.http.10.apache.php on line 321 ~ #1556: fixed libnss-mysql might return wrong username ~ #1559: fixed incorrect Mail Path ~ #1565: fixed vhosts f?r deaktivierte user werden erstellt ~ #1568: fixed ssl settings werden bei rewrite nicht angewendet ~ #1575: fixed Debian Wheezy postfix wrong sql statements or wrong main.cf ~ #1578: fixed Warnung bei Standard FTP-User ~ #1582: fixed Install prompt in Froxlor incorrect - Bind9 Start Error rndc: connect failed: 127.0.0.1#953: connection refused ~ #1583: fixed SSL aktiv obwohl kein Zertifikat hinterlegt wurde You can see all changes in our bugtracker at http://redmine.froxlor.org/versions/69Download: 0.9.34.2Update: Due to an issue with the nginx-cron file we updated the 0.9.34.1 release to 0.9.34.2Note: Gentoo-ebuild and Debian packages are now available. Visit http://www.froxlor.org or join our IRC channel #froxlor on irc.freenode.net. Thank you, d00p [Less]

Dear Froxlor Community, today we are releasing our next major stable release 0.9.34 which (finally) brings configuration templates for Debian Jessie's services. The domain-import feature was enhanced, so even more fields can be specified, see ... [More] http://redmine.froxlor.org/projects/froxlor/wiki/DomainBulkActionDoc for more detailed information.   Configuration templates for dovecot now include managesieve / sieve so you can use server-side filtering-scripts - yay   We also changed the naming of the virtual-config files for the webserver to allow the use of nth-level subdomains (sub.sub.sub.domain.tld or even deeper). And for apache, we now support mpm-itk. Additionally, a community driven feature was merged which allows the viewing of older statistics, when using awstats. Our database-integrity-check now checks for correct membership of webserver- and local froxlor-user/group when using FCGID / php-fpm or mpm-itk.Important: The already deprecated configuration templates for the following distributions have been dropped: Debian Squeeze (6.x), Ubuntu Lucid (10.04) and SUSE Linux Enterprise. We also had to drop support for FreeBSD because no one in the team uses it and can test the config (feel free to contact us, if you do!).  Changes in 0.9.34: + #545: add access to older statistics when using awstats + #957: added managesieve/sieve to configuration-templates of dovecot + #1400: added support for apache mpm-itk + #1485: check for existence of ssl-files and if not, do not create ssl-related vhost-settings + #1486: added possibility to specify umask when using FCGID ~ #1488: fixed css issues ~ #1491: fixed changing of webserver-user/group in the users-table when they were changed in the settings ~ #1492: fixed missing LSB tags for php-fcgi on debian based distros ~ #1503: fixed database-connection when using sockets, do not replace 'host' value but use 'socket' ~ #1507: fixed open_basedir-path when using mod_php ~ #1512: enhanced domain-import, see http://redmine.froxlor.org/projects/froxlor/wiki/DomainBulkActionDoc ~ #1535: fixed problem when using sub-subdomain (or deeper) with apache due to file-naming ~ #1541: enhanced default ssl-cipher-list to be more secure - #xxxx: removed webftp-script as we think this is a possible security issue and not necessary You can see all changes in our bugtracker at http://redmine.froxlor.org/versions/55Download: 0.9.34Note: Gentoo-ebuild and Debian packages are now available. Visit http://www.froxlor.org or join our IRC channel #froxlor on irc.freenode.net. Thank you, d00p [Less]

Dear Froxlor-community,   due to a severe security issue in the database logging system, we strongly recommend to update your current froxlor installation to 0.9.33.2. We also recommend to remove any content from the /froxlor/logs/ ... [More] directory.Download: 0.9.33.2Note: Gentoo-ebuild and Debian packages are now available.. Visit http://www.froxlor.org or join our IRC channel #froxlor on irc.freenode.net. Thank you, d00p [Less]

Dear Froxlor Community,today we are releasing our next major stable release 0.9.33 which includes a bunch of improvements and some interesting new features.Starting with this version, froxlor allows to move customers from one admin to another ... [More] (including all resources like domains etc.). Due to the wish of some community members, we included a domain-import. It can be found in the admin-domain overview, more information can be found at http://redmine.froxlor.org/projects/froxlor/wiki/DomainBulkActionDoc.Also we added possibilities to define password-complexity rather then specifying a regular-expression - this makes suggested passwords in the panel match the complexity. The account passwords for admins and customers are now also hashed with the algorithm you've set in the settings. The passwords are being updated automatically when the user logs in successfully - you do not have to do anything. The default hash has been changed from MD5 to SHA256 - updaters need to set the setting manually as we do not overwrite user-settings.Additionally, an admin can now specify a custom-newsfeed for his customers which is being displayed instead of the froxlor-newsfeed.Our database-integrity-check now checks for correct UTF-8 in our tables and logs issues found and what has been fixed if necessary, this makes its actions more transparent and replicable to the admin. It is now possible to add custom notes to admin / customer profiles. Optionally this custom note can be displayed on the users dashboard. For users that really want to use sockets instead of 127.0.0.1/localhost for the database-connection can now set the "host" value in lib/userdata.inc.php to a socket-file. We have included new configuration templates for Ubuntu 14.04 and RHEL / CentOS 7.Important: the directory permissions for (new) customers changed to be more secure (0755 -> 0750), if you use FCGID or php-fpm you have to update your libnss-mysql config for this to work, you can see changes in the config-templates at http://config.froxlor.org (chose your distribution and your current version and click "show differences"). Note: Many people seem to be having issues with php-fpm / libnss / user-group permissions - nscd can be a party-killer sometimes, try to clear its cache using nscd --invalidate=groupChanges in 0.9.33:+ #1289: use password-hash from froxlor-settings for admin/customer accounts + #1335: added possibility to use a socket-file for the database-connection + #1408: added custom newsfeed on customer-dashboard + #1410: added possibility to move customer between admins + #1414: added configuration templates for Ubuntu 14.04 LTS + #1452: added domain import (CSV file), infos at http://redmine.froxlor.org/projects/froxlor/wiki/DomainBulkActionDoc + #1471: added custom-notes field in admin and customer profiles ~ #1426: fixed utf-8 encoding problem (use db-integrity check) ~ #1427: fixed the way php was included in nginx-vhosts ~ #1430: fixed various nginx-vhost problems ~ #1437: fixed cron-problem in FreeBSD ~ #1440: fixed ip-validation in some special cases ~ #1446: fixed nginx auto-index problem ~ #1447: fixed libnss-configs for customer-docroot chmod 750 ~ #1455: fixed directory-protection with apache-2.4 ~ #1458: fixed incorrect security check on mail-directories where various special-characters are allowed ~ #1459: fixed deprecated postfix configuration templates in debian ~ #1465: fixed dovecot-transport configuration in ubuntu ~ #1466: fixed design-issues when no add-link is present in overviews ~ #1468: fixed installer when mysql strict-mode is used ~ #1483: fixed possible orphaned lock-file from cronjobChanges in 0.9.33.1:~ #1489: fixed mysql-connection problem when using a private-network IP ~ #1498: fixed nginx vhost merging in case of variables in vhost, e.g. ${variable} ~ #1500: fixed global PEAR path for php-fpmYou can see all changes in our bugtracker at http://redmine.froxlor.org/versions/64 and http://redmine.froxlor.org/versions/65 (also changes in 0.9.33-rc1, changes in 0.9.33-rc2)Download: 0.9.33.1Note: Gentoo-ebuild and Debian packages are now available.Visit http://www.froxlor.org or join our IRC channel #froxlor on irc.freenode.net.Thank you,d00p [Less]

Dear Froxlor Community,today we are releasing our next major stable release 0.9.33 which includes a bunch of improvements and some interesting new features.Starting with this version, froxlor allows to move customers from one admin to another ... [More] (including all resources like domains etc.). Due to the wish of some community members, we included a domain-import. It can be found in the admin-domain overview, more information can be found at http://redmine.froxlor.org/projects/froxlor/wiki/DomainBulkActionDoc.Also we added possibilities to define password-complexity rather then specifying a regular-expression - this makes suggested passwords in the panel match the complexity. The account passwords for admins and customers are now also hashed with the algorithm you've set in the settings. The passwords are being updated automatically when the user logs in successfully - you do not have to do anything. The default hash has been changed from MD5 to SHA256 - updaters need to set the setting manually as we do not overwrite user-settings.Additionally, an admin can now specify a custom-newsfeed for his customers which is being displayed instead of the froxlor-newsfeed.Our database-integrity-check now checks for correct UTF-8 in our tables and logs issues found and what has been fixed if necessary, this makes its actions more transparent and replicable to the admin. It is now possible to add custom notes to admin / customer profiles. Optionally this custom note can be displayed on the users dashboard. For users that really want to use sockets instead of 127.0.0.1/localhost for the database-connection can now set the "host" value in lib/userdata.inc.php to a socket-file. We have included new configuration templates for Ubuntu 14.04 and RHEL / CentOS 7.Important: the directory permissions for (new) customers changed to be more secure (0755 -> 0750), if you use FCGID or php-fpm you have to update your libnss-mysql config for this to work, you can see changes in the config-templates at http://config.froxlor.org (chose your distribution and your current version and click "show differences"). Note: Many people seem to be having issues with php-fpm / libnss / user-group permissions - nscd can be a party-killer sometimes, try to clear its cache using nscd --invalidate=groupChanges in 0.9.33:+ #1289: use password-hash from froxlor-settings for admin/customer accounts + #1335: added possibility to use a socket-file for the database-connection + #1408: added custom newsfeed on customer-dashboard + #1410: added possibility to move customer between admins + #1414: added configuration templates for Ubuntu 14.04 LTS + #1452: added domain import (CSV file), infos at http://redmine.froxlor.org/projects/froxlor/wiki/DomainBulkActionDoc + #1471: added custom-notes field in admin and customer profiles ~ #1426: fixed utf-8 encoding problem (use db-integrity check) ~ #1427: fixed the way php was included in nginx-vhosts ~ #1430: fixed various nginx-vhost problems ~ #1437: fixed cron-problem in FreeBSD ~ #1440: fixed ip-validation in some special cases ~ #1446: fixed nginx auto-index problem ~ #1447: fixed libnss-configs for customer-docroot chmod 750 ~ #1455: fixed directory-protection with apache-2.4 ~ #1458: fixed incorrect security check on mail-directories where various special-characters are allowed ~ #1459: fixed deprecated postfix configuration templates in debian ~ #1465: fixed dovecot-transport configuration in ubuntu ~ #1466: fixed design-issues when no add-link is present in overviews ~ #1468: fixed installer when mysql strict-mode is used ~ #1483: fixed possible orphaned lock-file from cronjobChanges in 0.9.33.1:~ #1489: fixed mysql-connection problem when using a private-network IP ~ #1498: fixed nginx vhost merging in case of variables in vhost, e.g. ${variable} ~ #1500: fixed global PEAR path for php-fpmYou can see all changes in our bugtracker at http://redmine.froxlor.org/versions/64 and http://redmine.froxlor.org/versions/65 (also changes in 0.9.33-rc1, changes in 0.9.33-rc2)Download: 0.9.33.1Note: Gentoo-ebuild and Debian packages are now available.Visit http://www.froxlor.org or join our IRC channel #froxlor on irc.freenode.net.Thank you,d00p [Less]